Dead domain controller; now what?

FridayChild · 09-11-2006, 02:42 AM

I have a Windows 2003 domain (still in Windows 2000 native mode) with two domain controllers.
Domain controller n.1 is the holder of all FSMO roles and hosts the global catalog, and is a DNS server for the domain.
Domain controller n.2 is merely another domain controller and a second DNS server.
N.2 failed completely (dead hard disk) and I had no backups.
I want to reinstall Windows 2003 from scratch and basically put n.2 back in place, with the same name as before and with the same functions (domain controller and DNS server).
I understand that to do this I have to manually clean up data from Active Directory (and from DNS) to allow the "new" installation to use the same name.
I have found this MS document: http://support.microsoft.com/kb/216498/
The document refers to the case of a DCPROMO demotion gone bad, but I assume the scenario would be the same in my case: manual clean up.
Are the procedures outlined in the document correct? Do I have to expect problems if I do the above? Will I be able to put DC n.2 back in place? What precautions do you suggest, other than backing up the surviving server before starting the manual cleanup?
Thanks

infused · 09-11-2006, 03:06 PM

Is there no backup of this machine at all? System State?

FridayChild · 09-12-2006, 12:24 AM

No backup whatsoever.

whardman · 09-12-2006, 06:56 AM

One thing you could do is to recreate the domain controller, then demote it. that should clear out some of the left over stuff that needs to be cleared.

**bilbus** · 09-12-2006, 09:36 PM

use Ntdsutil and seize AD roles (while logged into working DC) you need win2k3's support tools

reboot, delete old server from ADSAS and ADUC.

crazijoe · 09-13-2006, 06:40 AM

He actually doesn't need to seize the rolls because his currently active DC is holding them.

FridayChild · 09-13-2006, 09:41 AM

Correct.
May I ask again: is the procedure described in
http://support.microsoft.com/kb/216498/
correct in my case?

**bilbus** · 09-14-2006, 05:10 PM

Hmm i missread question
oh then in that case

delete old server from ADSAS and ADUC.
Reformet, install AD, add second server as a GC.
Done

FridayChild · 09-15-2006, 01:15 AM

Actually the surviving DC has no SP1 installed, so I guess I'll have to follow the "Win2000/Win2003RTM" procedure: NDSIUTIL and ADSIEDIT, command line, no GUI tools. Don't you think?
Anyway did you mean GC like in "global catalog"? With a single domain in the forest, and no trust relationships whatsoever, should there be just one or more global catalog copies?

09-11-2006, 02:42 AM	#1 (permalink)
FridayChild Registered User Join Date: Oct 2004 Posts: 6 OS: Win98	Dead domain controller; now what? I have a Windows 2003 domain (still in Windows 2000 native mode) with two domain controllers. Domain controller n.1 is the holder of all FSMO roles and hosts the global catalog, and is a DNS server for the domain. Domain controller n.2 is merely another domain controller and a second DNS server. N.2 failed completely (dead hard disk) and I had no backups. I want to reinstall Windows 2003 from scratch and basically put n.2 back in place, with the same name as before and with the same functions (domain controller and DNS server). I understand that to do this I have to manually clean up data from Active Directory (and from DNS) to allow the "new" installation to use the same name. I have found this MS document: http://support.microsoft.com/kb/216498/ The document refers to the case of a DCPROMO demotion gone bad, but I assume the scenario would be the same in my case: manual clean up. Are the procedures outlined in the document correct? Do I have to expect problems if I do the above? Will I be able to put DC n.2 back in place? What precautions do you suggest, other than backing up the surviving server before starting the manual cleanup? Thanks

09-13-2006, 06:40 AM	#6 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	He actually doesn't need to seize the rolls because his currently active DC is holding them. __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

09-11-2006, 03:06 PM	#2 (permalink)
infused Registered User Join Date: Sep 2006 Posts: 19 OS: WinXP	Is there no backup of this machine at all? System State?

09-12-2006, 12:24 AM	#3 (permalink)
FridayChild Registered User Join Date: Oct 2004 Posts: 6 OS: Win98	No backup whatsoever.

09-12-2006, 06:56 AM	#4 (permalink)
whardman Registered User Join Date: Jun 2006 Location: Cincinnati, Ohio Posts: 617 OS: Windows XP My System	One thing you could do is to recreate the domain controller, then demote it. that should clear out some of the left over stuff that needs to be cleared.

09-12-2006, 09:36 PM	#5 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 949 OS: OS2 Warp	use Ntdsutil and seize AD roles (while logged into working DC) you need win2k3's support tools reboot, delete old server from ADSAS and ADUC.

09-13-2006, 09:41 AM	#7 (permalink)
FridayChild Registered User Join Date: Oct 2004 Posts: 6 OS: Win98	Correct. May I ask again: is the procedure described in http://support.microsoft.com/kb/216498/ correct in my case?

09-14-2006, 05:10 PM	#8 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 949 OS: OS2 Warp	Hmm i missread question oh then in that case delete old server from ADSAS and ADUC. Reformet, install AD, add second server as a GC. Done

09-15-2006, 01:15 AM	#9 (permalink)
FridayChild Registered User Join Date: Oct 2004 Posts: 6 OS: Win98	Actually the surviving DC has no SP1 installed, so I guess I'll have to follow the "Win2000/Win2003RTM" procedure: NDSIUTIL and ADSIEDIT, command line, no GUI tools. Don't you think? Anyway did you mean GC like in "global catalog"? With a single domain in the forest, and no trust relationships whatsoever, should there be just one or more global catalog copies?